f1a9f78825dd77c80ebf13c66f0f6e93_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

f1a9f78825dd77c80ebf13c66f0f6e93_JaffaCakes118
Size

91KB
MD5

f1a9f78825dd77c80ebf13c66f0f6e93
SHA1

853ec7a42b4c1c166d38db7c6b48505d59923abb
SHA256

04ba5dbfedddb6eef2742e5028d131a576b1e54ebfded7c83f22a7736d4f56d4
SHA512

6d8b796476e558bffa03c87dfa3ae79110eaa9144d8f1c49abaa299b7b1b34ce3d29bba5ad46b496b553dbe314ff9ded1408dfee4a6296b14ec893c2562d306a
SSDEEP

1536:KdLEO4TeqI4D/w/S8yYVDcBuuYSQMxZXB448oIO7V2TXbE59sVg0xdy7sdK:gfsewY/S8y4Qh5L58AKXbnfdyw8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1a9f78825dd77c80ebf13c66f0f6e93_JaffaCakes118

Files

f1a9f78825dd77c80ebf13c66f0f6e93_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d9cd2998f0c38d3fea6a798ada797c37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CalcMenuBar
CreateIcon
CopyRect
EndDialog
DrawTextW
IsWindow
GetCursor
GetWindowTextLengthA
GetDlgItem
CloseWindow
GetWindowTextA
LoadCursorA
DrawIcon
AppendMenuW
AlignRects
BlockInput
DrawTextA
InsertMenuA
GetFocus
CloseWindow
DialogBoxParamA
BlockInput
CreateIcon
GetDlgItem
GetFocus
LoadMenuA
IsWindow
CopyImage
AlignRects
GetMenu
GetDC
GetWindowTextA
DialogBoxParamW
EndDialog
DrawIcon

comctl32

ImageList_GetImageRect
ImageList_AddIcon
InitCommonControls
ImageList_GetIconSize
ImageList_GetDragImage
ImageList_LoadImageA
ImageList_DragEnter
ImageList_Create
ImageList_DragShowNolock
ImageList_LoadImage
ImageList_Draw
ImageList_Copy
ImageList_Merge
ImageList_Destroy
ImageList_DrawIndirect
ImageList_Remove
ImageList_GetImageCount

kernel32

GetStdHandle
GlobalFree
GetModuleHandleA
DeleteFileA
CloseHandle
GetFileSize
GetStringTypeA
lstrcatA
HeapAlloc
GetCommandLineA
GetDateFormatA
Sleep
lstrcmpA
SetLastError
GetFileAttributesA
lstrcpyA
WideCharToMultiByte
lstrcpynA
GetLastError

advapi32

RegReplaceKeyA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyA
RegEnumKeyExA
RegDeleteKeyA
RegQueryValueW
RegGetKeySecurity
RegReplaceKeyW
RegOpenKeyW
RegOpenKeyExA
RegLoadKeyA
RegCreateKeyW
RegQueryInfoKeyW
RegDeleteKeyW
RegQueryValueA
RegQueryInfoKeyA
RegCreateKeyExA
RegEnumKeyA
RegEnumKeyExW

Sections

.nTiUvD
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.oMoA
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.GPTKV
Size: 6KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MSIF
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ

.gZzOLe
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d9cd2998f0c38d3fea6a798ada797c37

Headers

File Characteristics

Imports

user32

comctl32

kernel32

advapi32

Sections

.nTiUvD Size: 14KB - Virtual size: 13KB

.oMoA Size: 65KB - Virtual size: 65KB

.GPTKV Size: 6KB - Virtual size: 61KB

.MSIF Size: - Virtual size: 3KB

.gZzOLe Size: 1KB - Virtual size: 1KB

.nTiUvD
Size: 14KB - Virtual size: 13KB

.oMoA
Size: 65KB - Virtual size: 65KB

.GPTKV
Size: 6KB - Virtual size: 61KB

.MSIF
Size: - Virtual size: 3KB

.gZzOLe
Size: 1KB - Virtual size: 1KB